Vanguard media stack: ingest, copyparty, Syncthing, normalize sweep, Authentik, Jellyfin + Vanguard Metadata plugin, MariaDB, Gitea, bot runtime

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Caddyfile

@@ -0,0 +1,29 @@
+media.example.com {
+	encode zstd gzip
+
+	# dump endpoint (python service on the host, does its own auth)
+	handle /dump* {
+		reverse_proxy 127.0.0.1:8080
+	}
+
+	# Syncthing admin UI (its own login; strip the prefix, present a local Host to pass its host check)
+	redir /sync /sync/ 308
+	handle_path /sync/* {
+		reverse_proxy 127.0.0.1:8384 {
+			header_up Host {upstream_hostport}
+		}
+	}
+
+	# OBS browser dock (static)
+	handle_path /dock* {
+		root * /srv/dock
+		file_server
+	}
+
+	# everything else is copyparty (web UI + WebDAV)
+	handle {
+		reverse_proxy 127.0.0.1:3923 {
+			flush_interval -1
+		}
+	}
+}